3 ms·
it's easy for something with arbitrary code execution to escape the sandboxing. https://hanako.codeberg.page/ https://hanako.codeberg.page/
by nullc 2y ago
it's easy for something with arbitrary code execution to escape the sandboxing.
https://hanako.codeberg.page/ https://hanako.codeberg.page/
- mikedelfino 2y agoI couldn't reproduce the tty example, but it might as well be a mistake on my side. Other than this, the sandboxing spec itself is as safe as I'd expect. I reckon that Wayland applications not packaged to require $HOME access or some dbus services are not known to escape the sandbox. This seems to be the case of Firefox, afaict.